IN THE CLAIMS: 

1. (Currently amended) A method for distributed network address translation with security, 
comprising the following steps: 

providing a first network device and a second network device on a first network; 

negotiating and establishing a security association between the first network device and a 
third network device on a second network external to the first network, the second network 
device being positioned between the first network device and the third network device; 

specifying an external address of the third network device for the security association; 

storing the external address in a table on the second network device; and 

mapping at least one of an internal address and a security value to the external address in 
the table. 

2. (Original) A computer readable medium having stored therein instructions for causing a 
central processing unit to execute the method of claim 1 . 

3. (Original) The method of claim 1 wherein the second network device is a distributed network 
address translation router. 

4. (Original) The method of claim 1 wherein the security value is a security parameter index for 
an Internet Protocol security protocol. 
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5. (Original) The method of claim 4 wherein the Internet Protocol security protocol is any of an 
Authentication Header protocol, Encapsulated Security Payload protocol, or an Internet Key 
Exchange protocol. 

6. (Original) The method of claim 1 further comprising the step of specifying the external 
address of the third network device for the security association with a Port Allocation Protocol 
external address validating message sent from the first network device to the second network 
device. 

7. (Original) The method of claim 6 wherein the Port Allocation Protocol external address 
validating message has a valid external address field. 

8. (Original) The method of claim 1 further comprising the step of removing the external 
address from the table with a Port Allocation Protocol external address invalidating message sent 
from the first network device to the second network device. 

9. (Original) The method of claim 8 wherein the Port Allocation Protocol external address 
invalidating message has an invalid external address field. 

10. (Currently amended) A method for distributed network address translation with security, 
comprising the following steps: 
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providing a first network device and a second network device on a first network, and a 
third network device on a second network external to the first network, the second network 
device being positioned between the first network device and the third network device; 

sending a packet having an external address and a security value from the third network 
device to the first network device; 

intercepting the packet with the second network device; 

determining whether the security value of the packet has been allocated to the first 
network device; 

determining whether the external address of the packet has been specified by the first 
network device as being valid; and 

sending the packet from the second network device to the first network device if the 
security value has been allocated to the first network device and the external address of the 
packet has been specified by the first network device as valid , thereby confirming that a security 
association has been negotiated and established between the first network device and the third 
network device . 

1 1 . (Original) A computer readable medium having stored therein instructions for causing a 
central processing unit to execute the method of claim 10. 

12. (Original) The method of claim 10 wherein the second network device is a distributed 
network address translation router. 
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13. (Original) The method of claim 10 wherein the security value is a security parameter index 
for an Internet Protocol security protocol. 

14. (Original) The method of claim 13 wherein the Internet Protocol security protocol is either 
an Authentication Header protocol or an Encapsulated Security Payload protocol. 

15. (Original) The method of claim 10 further comprising the step of discarding the packet if the 
security value of the packet has not been allocated to the first network device. 

16. (Original) The method of claim 10 further comprising the step of discarding the packet if the 
external address of the packet has not been specified by the first network device as being valid. 

17. (Original) The method of claim 10 further comprising the steps of discarding the packet if 
the security value of the packet has not been allocated to the first network device, and discarding 
the packet if the external address of the packet has not been specified by the first network device 
as being valid. 

18. (Original) The method of claim 10 further comprising the step of specifying the external 
address as being valid if a security association has been established between the first network 
device and the third network device. 

19. (Original) The method of claim 18 further comprising the step of storing a valid external 
address in a table on the second network device. 
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20. (Currently amended) A system for distributed network address translation with security 
comprising: 

a routing network device using distributed network address translation with security to 
provide routing services for a plurality of internal and external network devices, the routing 
network device being positioned between an internal network device and an external network 
device; and 

an established security association table associated with the routing network device for 
storing external addresses of external network devices that have negotiated and established 
security associations with internal network devices, and mapping external addresses that have 
been specified as valid by the internal network devices to one of internal network addresses and 
security values for established security associations. 
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